Microsoft: >> Azure Kubernetes Service Security Vulnerabilities
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-06-09
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-04-03
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVSS Score
9.0
EPSS Score
0.013
Published
2024-02-13
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
CVSS Score
9.0
EPSS Score
0.012
Published
2024-02-13
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Known exploited
CVSS Score
7.5
EPSS Score
1.0
Published
2023-10-10
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS Score
7.5
EPSS Score
0.028
Published
2023-09-12
Azure Virtual Machine Information Disclosure Vulnerability
CVSS Score
6.8
EPSS Score
0.013
Published
2021-03-11
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS Score
6.8
EPSS Score
0.02
Published
2021-02-25
Azure Active Directory Pod Identity Spoofing Vulnerability
CVSS Score
5.5
EPSS Score
0.011
Published
2021-01-12